Release workflow@5.0.0-beta.13 · vercel/workflow

@workflow/core@5.0.0-beta.13

#1854 8d75491 @TooTallNate - Surface workflowCoreVersion from the responding deployment in healthCheck() results.
#2185 0fd0891 @VaguelySerious - Fix CorruptedEventLogError on replay when a workflow races a hook read against a sleep() (e.g. Promise.race([hook, sleep])). Branch-deciding deliveries (buffered hook payloads and wait completions) are now handed to the workflow in strict event-log order — anchored on event position rather than on microtask-resolution timing — so the committed branch wins the race deterministically, independent of decryption/hydration time or Promise.race argument order.
#2257 ccd37e9 @pranaygp - Avoid unhandled run lookups for unused or empty readable streams and include Vercel request correlation headers in world transport errors.
#2301 bb6ff9a @pranaygp - Update vulnerable package dependencies to patched releases.
#2292 aa628b7 @pranaygp - Bump devalue to 5.8.1 to address published security advisories.

#2301 bb6ff9a @pranaygp - Update vulnerable package dependencies to patched releases.

#2296 867e339 @pranaygp - Prevent concurrent readers from observing partially written local entity files.
#2255 81bda49 @ctgowrie - Update @vercel/queue from 0.2.1 to 0.3.0

#2301 bb6ff9a @pranaygp - Update vulnerable package dependencies to patched releases.
#2255 81bda49 @ctgowrie - Update @vercel/queue from 0.2.1 to 0.3.0

#2257 ccd37e9 @pranaygp - Avoid unhandled run lookups for unused or empty readable streams and include Vercel request correlation headers in world transport errors.
#2255 81bda49 @ctgowrie - Update @vercel/queue from 0.2.1 to 0.3.0
#2035 c19f38d @TooTallNate - Validate ref resolve responses (empty, truncated, or Content-Length-mismatched bodies) before use, throwing WorkflowWorldError instead of corrupting the event log.

#2301 bb6ff9a @pranaygp - Update vulnerable package dependencies to patched releases.

#2301 bb6ff9a @pranaygp - Update vulnerable package dependencies to patched releases.

#2251 63f1a99 @karthikscale3 - Render message-only workflow errors with the dedicated error block instead of the generic data inspector.
#2252 9398065 @mitul-s - New trace viewer cleanup: fix EventRow crash on spans without attributes.data, drop dead DetailPanel + empty placeholder files, give time markers and segments stable keys, fix invalid stroke-linejoin JSX attribute, and replace the unsafe Trace cast with the real TraceWithMeta type.

#2253 a51910b @wbinnssmith - Always apply turbopack content condition regardless of builder mode to prevent the workflow loader from running on every JS/TS file when lazy discovery is enabled.
#2263 0b8b077 @ijjk - Avoid creating a separate esbuild steps bundle in Next.js lazy discovery mode.

#2301 bb6ff9a @pranaygp - Update vulnerable package dependencies to patched releases.

#2080 d674d6f @VaguelySerious - Use AST-based import rewriting for NestJS CommonJS workflow bundles.